8805ce8c3257c43b3d7da1b6dc2a5148 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8805ce8c3257c43b3d7da1b6dc2a5148
Size

80KB
MD5

8805ce8c3257c43b3d7da1b6dc2a5148
SHA1

4547f0eecdb613eda29809ee1744c5a022f6264b
SHA256

bbafcd338b892682270e4967dfed5c5febc9fdb33715c2731112396f56c747a9
SHA512

83615861ae026734b332e1e6a57c15050a1fc00dfa8f3c474fdd3d95e69f5b039ca59b9173143154e40b9149ea1a43daadcfabe7921294741b6ce432174df6a7
SSDEEP

1536:yCjkecyyhBMUqZWshMvX8gZe0XqECrTwIUt8MHZ:fYMyhBFqZWshiX8WZXqbUIUnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8805ce8c3257c43b3d7da1b6dc2a5148

Files

8805ce8c3257c43b3d7da1b6dc2a5148
.dll windows:4 windows x86 arch:x86

a249652b606dcd37e4836a9bce0a4beb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Exports

Exports

ukxo

Sections

.code_01
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ